You are a Chief Information Security Officer $($CISO$)$ of a mid$-$sized company. You would like to implement a new software security approach in your organization.

What to propose in terms of making the new system more self managing and inherently resilent and budget to your boss to get necessary funding?

How would you get buy$-$in from your software security engineers? What kind of pep talk $($or rallying cry$)$ would you give to unenthusiastic employees of yours?

How would you measure your success in adopting your software security vision?